CVE-2016-4038

Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with Android KK(4.4) or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the gpio_config.gpio_name value.

• CWE-20

• http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/04/17/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/04/18/8Mailing List, Third Party Advisory
• http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/04/17/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/04/18/8Mailing List, Third Party Advisory

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4029WordPress before 4.5 does not consider octal and hexadecimal…8.6
• CVE-2016-4030Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 b…
• CVE-2016-4031Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 b…
• CVE-2016-4032Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 b…
• CVE-2016-4036The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE…
• CVE-2016-4037The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU…6
• CVE-2016-4040SQL injection vulnerability in the Workflow Screen in dotCMS…
• CVE-2016-4041Plone 4.0 through 5.1a1 does not have security declarations …
• CVE-2016-4042Plone 3.3 through 5.1a1 allows remote attackers to obtain in…
• CVE-2016-4043Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows rem…
• CVE-2016-4045An issue was discovered in Open-Xchange OX App Suite before …
• CVE-2016-4046An issue was discovered in Open-Xchange OX App Suite before …